3 Commits

Author	SHA1	Message	Date
Jouni Malinen	13cb0a66d5	EAP-EKE: Reject too long Prot() data when building a frame ... This error case in own buffer lengths being too short was not handled properly. While this should not really happen since the wpabuf allocation is made large for the fixed cases that are currently supported, better make eap_eke_prot() safer if this functionally ever gets extended with a longer buffer need. Signed-off-by: Jouni Malinen <j@w1.fi>	2015-12-22 00:10:22 +02:00
Jouni Malinen	dddf7bbd4e	EAP-EKE: Use os_memcmp_const() for hash/password comparisons ... This makes the implementation less likely to provide useful timing information to potential attackers from comparisons of information received from a remote device and private material known only by the authorized devices. Signed-off-by: Jouni Malinen <j@w1.fi>	2014-07-02 12:38:47 +03:00
Jouni Malinen	7e7610d788	EAP-EKE: Add peer implementation ... This adds a new password-based EAP method defined in RFC 6124. Signed-hostap: Jouni Malinen <j@w1.fi>	2013-07-07 20:30:10 +03:00